http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-147

DCP-Portal6.1.1和较早版本中的多个SQL注入漏洞，允许远程攻击者通过(1)index.php的lcat，doc或uid参数或者(2)forums.php的mid或bid参数来执行任意SQL指令。

来源:MISC
链接:http://www.hackgen.org/advisories/hackgen-2005-003.txt
来源:SECTRACK
名称:1013216
链接:http://securitytracker.com/id?1013216
来源:BUGTRAQ
名称:20050216[hackgen-2005-#003]-SQLinjectionbugsinDCP-Portal
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=110858497207809&w;=2
来源:XF
名称:dcpportal-multiple-sql-injection(19361)
链接:http://xforce.iss.net/xforce/xfdb/19361
来源:BID
名称:12573
链接:http://www.securityfocus.com/bid/12573
来源:BUGTRAQ
名称:20051211[PHP-CHECKER]99potentialSQLinjectionvulnerabilities
链接:http://www.securityfocus.com/archive/1/archive/1/419280/100/0/threaded
来源:SREASON
名称:108
链接:http://securityreason.com/securityalert/108
来源:MISC
链接:http://glide.stanford.edu/yichen/research/sec.pdf